5812 matches found
CVE-2020-36439: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the ticketedlock crate before 0.3.0 for Rust. There are unconditional implementations of Send for ReadTicket and WriteTicket...
CVE-2020-36440: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the libsbc crate before 0.1.5 for Rust. For Decoder , it implements Send for any R: Read...
CVE-2020-36441: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the abox crate before 0.4.1 for Rust. It implements Send and Sync for AtomicBox with no requirement for T: Send and T: Sync...
CVE-2020-36444: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the async-coap crate through 2020-12-08 for Rust. Send and Sync are implemented for ArcGuard without trait bounds on RC...
CVE-2020-36445: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the convec crate through 2020-11-24 for Rust. There are unconditional implementations of Send and Sync for ConVec...
CVE-2020-36446: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the signal-simple crate through 2020-11-15 for Rust. There are unconditional implementations of Send and Sync for SyncChannel...
CVE-2020-36454: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the parc crate through 2020-11-14 for Rust. LockWeak has an unconditional implementation of Send without trait bounds on T...
CVE-2020-36458: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the lexer crate through 2020-11-10 for Rust. For ReaderResult , there is an implementation of Sync with a trait bound of T: Send, E: Send...
CVE-2021-38191: Concurrent Execution using Shared Resource with Improper Synchronization
An issue was discovered in the tokio crate before 1.8.1 for Rust. Upon a JoinHandle::abort, a Task may be dropped in the wrong thread...
Design/Logic Flaw
Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication driver versions 01.19.000 through 01.39.010 and GT23 model communication driver versions 01.19.000 through 01.39.010 and GT SoftGOT2000 versions...
CVE-2021-20592
Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication driver versions 01.19.000 through 01.39.010 and GT23 model communication driver versions 01.19.000 through 01.39.010 and GT SoftGOT2000 versions...
CVE-2021-20592
CVE-2021-20592 affects Mitsubishi Electric GOT2000 family: GOT2000 GT27/GT25/GT23 MODBUS/TCP Slave drivers (versions 01.19.000–01.39.010) and GT SoftGOT2000 (versions 1.170C–1.256S). Root cause is missing synchronization in the MODBUS/TCP communication path, allowing a remote unauthenticated atta...
CVE-2021-20592: Improper Synchronization
Missing synchronization vulnerability in GOT2000 series GT27 model communication driver versions 01.19.000 through 01.39.010, GT25 model communication driver versions 01.19.000 through 01.39.010 and GT23 model communication driver versions 01.19.000 through 01.39.010 and GT SoftGOT2000 versions...
The vulnerability of the ARP Policer implementation on Juniper Networks’ Junos OS allows a perpetrator to circumvent traffic restrictions.
The vulnerability of the ARP Policer traffic filtering technology implemented in Juniper Networks’ Junos OS is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow a remote attacker to circumvent traffic restrictions...
CVE-2021-22384: Concurrent Execution using Shared Resource with Improper Synchronization
There is an Information Disclosure Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to authentication bypass...
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are caused by synchronization errors when using a common resource. This allows an attacker to escape the isolated software environment.
The vulnerabilities of Mozilla Firefox, Firefox ESR, and the email client Thunderbird are caused by synchronization errors when using a common resource. Exploiting these vulnerabilities can allow an attacker to escape from a isolated software environment...
389-ds-base: sync_repl NULL pointer dereference in sync_create_state_control()
A flaw was found In 389-ds-base. When the Content Synchronization plugin is enabled, an authenticated user can reach a NULL pointer dereference using a specially crafted query. This flaw allows an authenticated attacker to cause a denial of service. The highest threat from this vulnerability is t...
Security update for icinga2 (moderate)
openSUSE Security Update: Security update for icinga2 Announcement ID: openSUSE-SU-2021:1069-1 Rating: moderate References: 1180147 Cross-References: CVE-2020-29663 CVSS scores: CVE-2020-29663 NVD : 9.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N CVE-2020-29663 SUSE: 5.3...
The vulnerability of the FortiSandbox threat detection and mitigation system, related to synchronization errors when using a shared resource, allows a perpetrator to trigger a service failure.
The vulnerability of the FortiSandbox threat detection and mitigation system arises from synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker operating remotely to cause service interruptions...